/*
 * 孙建雄 2021-18
 */
package cn.edu.tyu.finance.thingstype.servlet;
import java.io.IOException;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import cn.edu.tyu.finance.util.DbUtil;
import cn.edu.tyu.finance.util.StringUtil;
/**
 *
 * @author sunjianxiong
 * @version 1.0
 */
/**
 * Servlet implementation class LoginServlet
 */
@WebServlet("/LoginServlet")
public class LoginServlet extends HttpServlet {
	private static final long serialVersionUID = 1L;
    
    /**
     * @see HttpServlet#HttpServlet()
     */
    public LoginServlet() {
        super();
        // TODO Auto-generated constructor stub
    }

	/**
	 * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
	 */
	protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		//1. 接收用户名和密码
		String uname = request.getParameter("username");
		String upsw = request.getParameter("userpsw");
		String upswMD5 = StringUtil.getMD5(upsw);
		//2. 连接数据库，查询有无此人
		Connection conn = null;
		PreparedStatement pstmt = null;
		ResultSet rs = null;
		conn = DbUtil.getConnection();
		String sql = "SELECT * FROM users WHERE username=? AND userpsw=?";
		try {
			pstmt = conn.prepareStatement(sql);
			pstmt.setString(1, uname);
			pstmt.setString(2, upswMD5);
			rs = pstmt.executeQuery();
			if (rs.next()) {
				response.sendRedirect("ok.jsp");
			} else {
				response.sendRedirect("fail.jsp");
			}
		} catch (SQLException e) {
			e.printStackTrace();
		} catch (IOException e) {
			e.printStackTrace();
		} finally {
			DbUtil.backConn(conn, pstmt, rs);
		}
	}

	/**
	 * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
	 */
	protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		// TODO Auto-generated method stub
		doGet(request, response);
	}

}
